polymarket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill reads prediction market descriptions, events, and titles from Polymarket via CLI tools, which contain user-generated or public prediction market text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation includes explicit tools for financial market operations, specifically trading prediction markets on Polymarket via actions like polymarket_create_order and polymarket_cancel_order, which fall under market orders and asset execution.